KYC registering agency gets cyber vulnerability alert

A team of cyber security researchers red-flagged last Wednesday a critical security issue in Sebi-registered KYC registering agency CDSL Ventures Limited (CVL), which it claimed, could be exploited for unauthorised access to sensitive personal and financial data of investors.

CVL is a wholly owned subsidiary of India’s largest securities depository Central Depository Services Limited. It facilitates centralised storing and safeguarding of investor information, provides fully digitised KYC services to market intermediaries and holds information of over 4 crore investors.

The vulnerability was fixed on Tuesday — a week after it was reported to CDSL, National Critical Information Infrastructure Protection Centre (NCIIPC) under National Technical Research Organisation, and CERT-In under the Ministry of Electronics and Information Technology (MEITY).